This is the procedure NCF uses to configure a TP-Link 8951ND modem out of the box or after a factory reset. To learn more about configuring your particular modem, consult the [[Modem manuals (DSL)|manual]].

This is the procedure NCF uses to configure a TP-Link 8951ND modem out of the box or after a factory reset. To learn more about configuring your particular modem, consult the [[Modem Manuals|manual]].

−

=== Configure as router ===

+

= Configure as Router=

# Connect power and turn on the modem with the black button on the back.

# Connect power and turn on the modem with the black button on the back.

Line 11:

Line 12:

##'''password:''' admin

##'''password:''' admin

−

If the modem was previously configured for someone, the password would be the previous user's DSL-Password. If it is unknown then do a reset to factory default, using a paper-clip in the reset hole on the back. Hold for 15 seconds to reset. The user name and password will now be as above.

+

If the modem was previously configured for someone, the password would be the previous user's [[DSL password]]. If it is unknown then do a reset to factory default, using a paper-clip in the reset hole on the back. Hold for 15 seconds to reset. The user name and password will now be as above.

+

{{:Template:Quick Facts (TP-Link DSL modem)}}

−

# When presented with the TP-Link configuration page, select the '''Quick Setup''' option at the top left.

+

# When presented with the TP-Link configuration page, select the '''Quick Start''' option at the top left.

# Select '''Run Wizard''' to proceed.

# Select '''Run Wizard''' to proceed.

Now a window pops open and you can begin to set up the details of the interface.

Now a window pops open and you can begin to set up the details of the interface.

Line 26:

Line 28:

# Click '''Next'''

# Click '''Next'''

−

{{:Quick Facts (TP-Link DSL modem)}}

Continuing now to set the '''user name''' and '''password'''

Continuing now to set the '''user name''' and '''password'''

# PPPoE Service name can remain blank

# PPPoE Service name can remain blank

Line 36:

Line 37:

Continuing now to set the '''wireless''' configuration

Continuing now to set the '''wireless''' configuration

# Ensure '''Access Point''' indicates '''activated'''

# Ensure '''Access Point''' indicates '''activated'''

−

# The '''SSID''' is set to NCF plus your ID, such as '''NCF_aa123'''. It is recommended you not use your first or last name, or street address as this information is broadcast and other people in your area will be able to associate the signal with which home it is coming from.

+

# The '''SSID''' is set to NCF plus a random number, such as '''NCF_123456'''. It is recommended you not use your first or last name, or street address as this information is broadcast and other people in your area will be able to associate the signal with which home it is coming from.

# Broadcast SSID remains selected

# Broadcast SSID remains selected

−

# '''Auth Type''' - must be set to '''WPA-PSK/WPA2-PSK'''

+

# '''Auth Type''' - must be set to '''WPA2-PSK'''

...wait a moment for it to offer additional field for encryption and password...

...wait a moment for it to offer additional field for encryption and password...

−

# Set '''Encryption Type''' to be '''TKIP/AES'''

+

# Set '''Encryption Type''' to be '''AES'''

# Set the '''Preshared Key''' to be your DSL-Password

# Set the '''Preshared Key''' to be your DSL-Password

# Click '''Next''' to Finish the wizard.

# Click '''Next''' to Finish the wizard.

Line 47:

Line 48:

Proceed with four more steps - Setting administrator access, and wireless locale setting

Proceed with four more steps - Setting administrator access, and wireless locale setting

−

=== Password protect the Admin Role ===

+

== VoIP Enabling==

+

# Launch Telnet session from the computer command line.

+

# Enter the following commands:

+

## sys edit autoexec.net (press enter)

+

## i (when you press i, it means inserting the following commands to the system)

+

## ip nat service sip sw off (press enter)

+

## x (press x)

+

+

==Password protect the Admin Role==

# Click on '''Maintenance''' in the menu along the top of the page. Below it other options appear.

# Click on '''Maintenance''' in the menu along the top of the page. Below it other options appear.

# Select '''Administration'''

# Select '''Administration'''

Line 56:

Line 65:

A pop-up log-in screen appears, and asks for sign-in. Use the User-ID '''admin''' and the DSL-Password just set. Return to the same configure page you were just at.

A pop-up log-in screen appears, and asks for sign-in. Use the User-ID '''admin''' and the DSL-Password just set. Return to the same configure page you were just at.

−

===Set daylight savings time===

+

==Set daylight savings time==

# In '''Maintenance''' select '''Time Zone'''.

# In '''Maintenance''' select '''Time Zone'''.

# Daylight Saving: Enabled

# Daylight Saving: Enabled

−

===Turn on SPI firewalling===

+

==Turn on SPI firewalling==

# In '''Advanced Setup''' select '''Firewall'''.

# In '''Advanced Setup''' select '''Firewall'''.

# SPI: Enabled

# SPI: Enabled

−

=== Final area setting and check ===

+

==Final area setting and check==

# Click '''Interface Setup''' in the top-of-page menu

# Click '''Interface Setup''' in the top-of-page menu

# Now select '''Wireless''' in the menu below that.

# Now select '''Wireless''' in the menu below that.

Line 72:

Line 81:

Still on this page, Verify:

Still on this page, Verify:

# The '''SSID''' in the form '''NCF_XXXXX''' or as you set.

# The '''SSID''' in the form '''NCF_XXXXX''' or as you set.

−

# The '''Auth Type''' is '''WPA-PSK/WPA2-PSK'''

+

# The '''Auth Type''' is '''WPA2-PSK'''

−

# The '''Encryption Type''' is '''TKIP/AES''' and key is DSL-Password

+

# The '''Encryption Type''' is '''AES''' and key is DSL-Password

# Click on the ''' Internet''' tab

# Click on the ''' Internet''' tab

# Ensure that PVC2 has VPI/VCI set at 0/35

# Ensure that PVC2 has VPI/VCI set at 0/35

Line 80:

Line 89:

The modem should now synchronize and connect to your DSL service if the service is operating. You may need to reboot the modem to get it to connect.

The modem should now synchronize and connect to your DSL service if the service is operating. You may need to reboot the modem to get it to connect.

−

==Security==

+

=Security=

−

In January 2014 it was revealed that some models of TP-Link modem, including this model, are subject to hacking if they are running out dated firmware and if the remote access (ACL) is set to allow remote access. [http://www.tp-link.com/en/article/?faqid=569 This official TP-Link web page] provides more detailed information on the vulnerability. Latest firmware versions can be checked on the [http://www.tp-link.com/en/support/download/?pcid=203 TP-Link website].

+

In January 2014 it was revealed that some models of TP-Link modem, including this model, are subject to hacking if they are running out dated firmware and if the remote access (ACL) is set to allow remote access. [[CERT-announced vulnerability of TP-Link modem/router|This web page]] provides more detailed information on the vulnerability. Latest firmware versions can be checked on the [https://www.tp-link.com/ca/download/TD-W8951ND.html TP-Link website].

−

==See also==

+

==ACL==

+

#To be sure your modem is secure, click on "Access Management". By default the "ACL" tab will be active.

Contents

Configure as Router

Connect power and turn on the modem with the black button on the back.

Connect an Ethernet LAN cable to one of the yellow rear ports

In the browser's address bar, enter the IP address for the modem interface page: 192.168.1.1

If the modem is fresh from the factory, use the default user name and password to gain access

user: admin

password: admin

If the modem was previously configured for someone, the password would be the previous user's DSL password. If it is unknown then do a reset to factory default, using a paper-clip in the reset hole on the back. Hold for 15 seconds to reset. The user name and password will now be as above.

When presented with the TP-Link configuration page, select the Quick Start option at the top left.

Select Run Wizard to proceed.

Now a window pops open and you can begin to set up the details of the interface.

Select Next to proceed

Set the Time Zone Eastern

Click Next

Set the connection type of PPPoE/PPPoA

Click Next

Ensure VPI is set to 0 and VCI is set to 35

Click Next

Verify that PPPoverEthernet PPPoE is selected

Click Next

Continuing now to set the user name and password

PPPoE Service name can remain blank

PPP username in the form ab123@ncf.ca (NOTE the "@ncf.ca" part! - it will not work without that!)

PPP Password uses DSL Password (This is not your NCF account password, but your DSL password and was provided to you when you signed up for service, it starts with "ncf...")

Ensure that the encapsulation remains at PPPoE LLC (default)

Click Next

Continuing now to set the wireless configuration

Ensure Access Point indicates activated

The SSID is set to NCF plus a random number, such as NCF_123456. It is recommended you not use your first or last name, or street address as this information is broadcast and other people in your area will be able to associate the signal with which home it is coming from.

Broadcast SSID remains selected

Auth Type - must be set to WPA2-PSK

...wait a moment for it to offer additional field for encryption and password...

Set Encryption Type to be AES

Set the Preshared Key to be your DSL-Password

Click Next to Finish the wizard.

Proceed with four more steps - Setting administrator access, and wireless locale setting

VoIP Enabling

Launch Telnet session from the computer command line.

Enter the following commands:

sys edit autoexec.net (press enter)

i (when you press i, it means inserting the following commands to the system)

ip nat service sip sw off (press enter)

x (press x)

Password protect the Admin Role

Click on Maintenance in the menu along the top of the page. Below it other options appear.

Select Administration

For the admin user use your DSL-Password or another strong password.

Enter it once and again below to confirm

Save the changes with Save

A pop-up log-in screen appears, and asks for sign-in. Use the User-ID admin and the DSL-Password just set. Return to the same configure page you were just at.

Set daylight savings time

In Maintenance select Time Zone.

Daylight Saving: Enabled

Turn on SPI firewalling

In Advanced Setup select Firewall.

SPI: Enabled

Final area setting and check

Click Interface Setup in the top-of-page menu

Now select Wireless in the menu below that.

Choose Canada for the Channel Setup

Click SAVE

Still on this page, Verify:

The SSID in the form NCF_XXXXX or as you set.

The Auth Type is WPA2-PSK

The Encryption Type is AES and key is DSL-Password

Click on the Internet tab

Ensure that PVC2 has VPI/VCI set at 0/35

Ensure that PPPoE credentials are set properly for your user name and password.

The modem should now synchronize and connect to your DSL service if the service is operating. You may need to reboot the modem to get it to connect.

Security

In January 2014 it was revealed that some models of TP-Link modem, including this model, are subject to hacking if they are running out dated firmware and if the remote access (ACL) is set to allow remote access. This web page provides more detailed information on the vulnerability. Latest firmware versions can be checked on the TP-Link website.

ACL

To be sure your modem is secure, click on "Access Management". By default the "ACL" tab will be active.